
Vulnvault
Developer-focused knowledge base of application security vulnerabilities with insecure vs secure code examples, prevention guidance, and OWASP/CWE…

Developer-focused knowledge base of application security vulnerabilities with insecure vs secure code examples, prevention guidance, and OWASP/CWE…

Curated bug-bounty methodology library with runbooks, recon/fuzz playbooks, checklists, and CLI helpers for target scoping, cert enumeration, and…

Curated collection of LLVM security resources covering binary lifting, code obfuscation, static analysis, symbolic execution, sanitizers, and…

Reproduce DeFi hacked incidents using Foundry.

Offensive Security OSCP+, OSEP, OSWP, OSWA, OSWE, OSED, OSMR, OSEE, OSDA, OSIR, OSTH Exam and Lab Reporting / Note-Taking Tool


A Framework for Integrating Application Security into Software Engineering (FIASSE) using the Securable Software Engineering Model (SSEM)

The OWASP NodeGoat project provides an environment to learn how OWASP Top 10 security risks apply to web applications developed using Node.js and how…

OWASP Certified Secure-Software Developer

Trail of Bits Testing Handbook - appsec.guide

Resources related to GitHub Security Lab

OWASP Smart Contract Security (SCS) Project

Take first steps in CodeQL for Python by writing a query to find CVE-2024-32022

The Secure Coding Practices Quick-reference Guide from OWASP

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

Zyrox: LLVM based, compile-time obfuscator plugin.

Header-only C++2x compile-time assembler for x86/x86-64 instruction encoding

A curated list of resources, practice questions, and study materials to help you prepare for Application Security (AppSec) interviews